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REMARKS JUN 05 2008 

Status OF THE Claims 

Claims 1-24, 26, and 28 are currently pending and have been amended. Claims 25 and 27 have 
been canceled. It is believed that no new matter has been introduced by ihe amendments. Jti 
view of the amendments and following remarks, the Applicant respectfully reqiiests 
reconsideraticwi of ^.rejections and aDowanice of flie application 

Rejections Under 35 U.S.C §101 



• non- 



The Examiner refected claims 26 and 28 under 35 U.S.C. § 101 for being directed to ] 
statutory subject matter. Office Action, 2. Claims 26 and 28, previously directed toward ; 
'computer program product/ is herein amended to be directed toward a 'computer-readable 
storage medium.' The Applicants submit that this amendment recites statutory subject matter 
and does not constitute the additicHi of new matter. ' 

Rejections UNDER 35 U.S.C. § 102(e) 

The Examiner rejected claims 1-28 under 35 US.C. § 102(e) as being anticipated by U.S. Patent 
6,802,012 (hereinafter Smithson). Office Action, 3. Ihe Applicants r«spectfuUy traverse the 
rejection. 

"A daim is anticipated only if each and every element as set forth in the claim is found, either 
expressly or inherently described, in a single prior art reference" Verdegaal Bros. v. Union OH 
Co. ofOaifbrma, 814 F.2d 628, 631 (Fed. Or. 1987). Ihe Applicants submit fliat Smiihson does not 
disclose 'extracting a plurality of reference points from the body of the message,.each reference 
point being infonnation used to contact a referenced entity, 'dassifying each of the plurality of 
reference points based on a source associated with each reference polni' and '^determining 
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whether Ihe message is a fraudulent message appearing to be from a legitimate source based on 
the classified reference points," as recited in the amended independent claims 1 and 26. 
Smithson also fails to disclose 'identifying a phiraHty of fraud indicators in a body of ihe 
message/ 'applying a statistical analysis on the pluraUty of fraud indicatora/ and 'deteimining 
. whether the message is a fraudulent message/ as ledted in the amended independent dahns 15 
and 28. 

SntiOison fails to disclose 'extracting a plurality of reference points from a body of ihe message.' 
A 'reference poinf is information in the body of a message fliat can be 'used to contact a 
referenced entity/ While Smiffoon teadies "e-mails containing words or content indicative of 
activity," Smithson fails to teach that the body of ihe email includes infonnation for contacting a 
referenced entity. Smithson, col. 3. 1. 52. Because Smithson does not disclose any 'reference points 
from a body of the message/ it cannot disclose 'extracting a phirality of referaice points from a 
body of the message/ ■• " ■ 

Smittew concenis ''scanning for q)am e-mail'' by determinirig whether th^ 

levd of e-mail messages haviiig orie or more common diaracteristics/' Sn«*AsoB, coL 3, L 63-66. 
Smithson therefore classifies e-mail diaracteristics based on whether diere are other e-mails with 
those characteristics in common. In contrast, 'classifying each of the plv^ahty of reference 
points/ as recited in Independent claim 1, for example, is 'based on a source associated with 
each reference point' Qassification based on the source of the reference point is different than 
classification based on comparison to other messages. Smithson, therefore, fails to dfaclose 
'classifying each of the phirality of reference points based on a source associated with each 
reference point.' 

Smithson also fails to disclose anything concerning 'determining wheftier the message is a 
fiaudulent message/ A fraudulent message designed to appear to be 'fi-om a legitimate source' 
in order to trick recipients Into revealing personal information. SmttKmn does not teach 
anything coriceming any fraudulent message or determining whether a message is a fraudulent 
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message. A spam message is not the same thing as a fraudulent message appearing to be from 
a legitimate source. Identifying a spam message is therefore different from determining 
whether a message is a fraudulent message appearinj^ to be from a legitimate source. 

Smitbson further fails to disclose 'identifying a pluralily of fraud indicators in the message/ A 
'fraud indicator' is a pattern characteristic to fraudulent messages, such as divergent reference 
points. While Smithson teaches ""scanning for spam e^?riail" by determining whether there is a 
"Areshold level of e-mail messages having one or mote common characteristics/' Smititsm fails 
to disclose anything concerning 'a phirality of fraud indicators' within a single message. 
Smithson, col. 3, 1. 63-66. Smithson therefore does not teacii 'identifying a pluraKfy of fraud 
indicators in the message.' 

Further, because Smithson does not disclose any 'pliurajity of fraud indicators in the message/ it 
also cannot disclose 'applying a statistical analysis on the pluralify of fraud iiidicators/ 
Smithson actually does not disclose any type of statistical analysis on any characteristic of the 
message. ' ^ ' 

Smithson also fails to disdose anjrfhing concerning 'dertbrmining whether the message is a 
fraudulent message based on the anafysis/ In additidn^ito flie faihire to teach 'a statistical 
analysis/ Smithson also fails to teach anjrtiiing concerning any 'fraudulent message' or 
'determining whetiier a message is a fraudulent message/ A spam message is not the same 
thing as a fraudulent message. Identifying a spam meilsage is different from determining 
whether a message is a fraudulent message. 

As such, the Applicants believe that Smithson fails to anticipate the independent claims 1, 15, 26, and 28. 
Further, because each of tiie dependent claims incorpd:^;ates by reference all the limitatiohs of flie 
independent daim from which it depends, Smithson alsb fails to antidpale dependent claims 2-14 and 
16-24. 
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CE^fTRALFAxce^f^gR 
JUN 0 5 2008 

CONCLUSION 

The Examiner's rejections of daims 1-28 are overcome in that the dted reference fails to teach 
each and every limitation of the claims. The Applicaitts have evidenced the failure of Smthsm 
to disclose each and every element of the independent claims, including at least 'extetcting a 
plurality of reference points from the body of the message^.eadi reference point being 
information used to contact a referenced entity/ ^classifying each of the plurality of reference 
points based on a source associated with each reference point' and 'determining whefhar the 
message is a fraudulent message appearing to be fixim a legitimate source based on the 
classified reference points," as recited in independent claims 1 and 26, as wen as at least 
'identifying a plurality of fraud indicators in a body of the message,' 'applying a statistical 
analysis on the plurality of fraud indicators/ and 'determining whether the message is a 
fraudulent message/ as recited in independent claims 15 and 28. 



Any daim dependent upon one of the af orementioaied independent claims is aUowable for at 
least the same reasons as the daim from which it depends. As such, each and every me of the 
dependent claims of the present application are also in condition for allowance. 

The Applicants respectfully request flie passage of the present application to allowance. The 
Examiner is invited to contact the Applicants' undereigned representative with any questions 
conoeming this matter. 

Respectfully submitted, 
Joruthan Oliver et al. 



June 5, 2008 By: 



Tarn Thanh Pham, Reg. No, 50,565 

Can- & Ferrell LLP 

2200 Geng Road 

Palo Alto, CA 94303 

T: 650.812.3400 

F: 650.812.3444 
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